CVE-2026-96636

A flaw was found in Pillow. A remote attacker could exploit this vulnerability by enticing an application or user to process a specially crafted multi-frame image file. Because decompression bomb protections are bypassed when navigating subsequent image frames, decoding the file allocates excessi...